[Snyk] Upgrade serialize-javascript from 3.1.0 to 6.0.0 #182

snyk-bot · 2022-01-29T17:21:38Z

Snyk has created this PR to upgrade serialize-javascript from 3.1.0 to 6.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 4 versions ahead of your current version.
The recommended version was released 7 months ago, on 2021-06-21.

Release notes

Package name: serialize-javascript

6.0.0 - 2021-06-21
Changelog
- Add support for URL's (#123)
- Bump mocha from 9.0.0 to 9.0.1 (#124)
- Bump mocha from 8.4.0 to 9.0.0 (#121)
- Update Node.js CI matrix (#122)
- Bump mocha from 8.3.2 to 8.4.0 (#120)
- Bump lodash from 4.17.19 to 4.17.21 (#119)
- Bump y18n from 4.0.0 to 4.0.1 (#116)
- Bump chai from 4.3.3 to 4.3.4 (#115)
- Bump mocha from 8.3.1 to 8.3.2 (#114)
- Bump mocha from 8.3.0 to 8.3.1 (#113)
- Bump chai from 4.3.1 to 4.3.3 (#112)
- Bump chai from 4.2.0 to 4.3.1 (#111)
- Bump mocha from 8.2.1 to 8.3.0 (#109)
- Bump mocha from 8.1.3 to 8.2.1 (#105)
- Drop Travis CI settings (#100)
- Change default branch name to main (#99)
- GitHub Aactions (#98)
Behavior changes for URL objects

It serializes URL objects as follows since this version. The result of serialization may be changed if you are passing URL object values into the serialize-javascript.
http://example.com/")}); // '{"u":new URL("http://example.com/")}'">
```
const serialize = require("serialize-javascript");
serialize({u: new URL("http://example.com/")}); // '{"u":new URL("http://example.com/")}'
```
Thank you @ rrdelaney for this release.
5.0.1 - 2020-09-10
Changelog
- Exclude .vscode and .github directories from package (#97)
5.0.0 - 2020-09-09
Changelog
- Bump mocha from 8.1.2 to 8.1.3 (#96)
- Support sparse arrays (#95)
- Bump mocha from 8.1.1 to 8.1.2 (#94)
- Bump mocha from 8.1.0 to 8.1.1 (#92)
- Create Dependabot config file (#91)
- Bump mocha from 8.0.1 to 8.1.0 (#90)
- Bump lodash from 4.17.15 to 4.17.19 (#89)
- Bump mocha from 7.2.0 to 8.0.1 (#88)
Behavior changes for sparse arrays

It serializes sparse arrays as follows since this version. The result of serialization may be changed if you are passing sparse arrays values into the serialize-javascript.

const serialize = require('serialize-javascript');

var a = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10];
delete a[0];
a.length = 3;
a[5] = 'wat';
serialize(a) // 'Array.prototype.slice.call({"1":2,"2":3,"5":"wat","length":6})'

Thank you @ victorporof for this release.
4.0.0 - 2020-06-08
Changelog
- Bump nyc from 15.0.1 to 15.1.0 (#85)
- support for bigint (#80)
Behavior changes for BigInt

It serializes BigInt values as follows since this version. The result of serialization may be changed if you are passing BigInt values into the serialize-javascript.

v4.x:

const serialize = require('serialize-javascript');

serialize({big: BigInt('10')}); // '{"big":BigInt("10")}'

v3.x:

const serialize = require('serialize-javascript');

serialize({big: BigInt('10')}); // throws error

Thank you @ mum-never-proud for this release.
3.1.0 - 2020-05-28
- Bump mocha from 7.1.2 to 7.2.0 (#83)
- Bump mocha from 7.1.1 to 7.1.2 (#82)
- Bump nyc from 15.0.0 to 15.0.1 (#81)
- Don't replace regex / function placeholders within string literals (#79)
- [Security] Bump minimist from 1.2.0 to 1.2.5 (#78)
- Bump mocha from 7.1.0 to 7.1.1 (#77)
- Bump mocha from 7.0.1 to 7.1.0 (#74)
- Update example in README (#73)
Note: the randombytes has been added to the dependency package to improve the generation of UIDs. Check the #22 for more information. Thanks to @ JordanMilne and @ Siebes for this change.